HP-ICF-GPPCV2-MIB

All MIBs › HP-ICF-GPPCV2-MIB

Organization: HP Networking

Last Updated: 2016-01-15

Category: Quality of Service, Technology: QoS, Vendor: HP/HPE

Description: HP ICF SNMP MIB version 2 for General Port Policy Control (GPPC) with enhanced policy objects on HP ProCurve switches.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HP-ICF-GPPCV2-MIB?

HP-ICF-GPPCV2-MIB is an HP proprietary MIB, version 2, for General Purpose Packet Control (GPPC) on HP ICF devices, used to configure advanced ingress packet-control policies such as access-control tunnel lists applied to switch ports. It exposes configuration objects like hpicfGppcv2AcIngressTunnelList, which define the set of ingress tunnel/ACL policies bound to a port's incoming traffic. This module is primarily configuration-oriented rather than a hardware or environmental health MIB, though its state can be checked to confirm policy provisioning matches administrative intent. It builds on HP's general packet-control (GPPC) framework and the port/interface indexing used across HP-ICF MIBs. It is deployed on HP ProCurve/Aruba switches that use GPPCv2-based ingress traffic policy enforcement such as tunneling or ACL-based redirection. Engineers can download the HP-ICF-GPPCV2-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in HP-ICF-GPPCV2-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

HP ProCurve switch
HP Aruba (ICF-based) switch

Monitoring Examples

hpicfGppcv2AcIngressTunnelList holds the configured list of ingress access-control tunnels applied to a port; an administrator reads this object to verify the expected tunnel/ACL policy is actually bound to that port, catching a misconfiguration where incoming traffic is not being redirected or filtered as the policy intended.

What Can Be Monitored

ingress tunnel/ACL list per port
GPPC policy configuration state

Imported Objects

From HP-ICF-OID

hpSwitch

OBJECT-IDENTITY

From Q-BRIDGE-MIB

PortList

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

RowStatus
TEXTUAL-CONVENTION
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
hpicfGppcv2MIB	1.3.6.1.4.1.11.2.14.11.5.1.61			This MIB module is for HP proprietary General Purpose Packet Control Version 2 (Gppcv2)
hpicfGppcv2Conformance	1.3.6.1.4.1.11.2.14.11.5.1.61.1
hpicfGppcv2MIBCompliances	1.3.6.1.4.1.11.2.14.11.5.1.61.1.1
hpicfGppcv2MIBCompliance	1.3.6.1.4.1.11.2.14.11.5.1.61.1.1.1			The compliance statement for HP routers implementing the HP-ICF-Gppcv2-MIB.
hpicfGppcv2MIBCompliance1	1.3.6.1.4.1.11.2.14.11.5.1.61.1.1.2			The compliance statement for HP routers implementing the HP-ICF-Gppcv2-MIB.
hpicfGppcv2MIBGroups	1.3.6.1.4.1.11.2.14.11.5.1.61.1.2
hpicfGppcv2Group	1.3.6.1.4.1.11.2.14.11.5.1.61.1.2.1			A collection of HP proprietary objects to support Gppcv2.
hpicfGppcv2Group1	1.3.6.1.4.1.11.2.14.11.5.1.61.1.2.2			A collection of HP proprietary objects to support Gppcv2.
hpicfGppcv2AppControlTable	1.3.6.1.4.1.11.2.14.11.5.1.61.2		not-accessible	The application control table. This keeps track of the applications that use Gppcv2, the policies set by these applications, and information on where/when/how to apply these policies. This information includes the interfaces and VLANs where the policy should be applied, whether it should be applied at ingress or egress, and when it should expire. The following limitation is in place: there can be no more than one policy action per SNMP pdu.
hpicfGppcv2AppControlEntry	1.3.6.1.4.1.11.2.14.11.5.1.61.2.1		not-accessible	An entry in the application control table.
STR hpicfGppcv2AcAppName	1.3.6.1.4.1.11.2.14.11.5.1.61.2.1.1	SnmpAdminString	not-accessible	Name of the application that last modified this row. All applications of the same type should use the same name and should use different instance identifiers to identify themselves uniquely. This is a printable string up to 16 bytes in size.
STR hpicfGppcv2AcAppInstance	1.3.6.1.4.1.11.2.14.11.5.1.61.2.1.2	SnmpAdminString	not-accessible	Instance identifier of the application. This is used to distinguish between different instances of the same application. This is a printable string up to 16 bytes in size.
HPI hpicfGppcv2AcPolicyType	1.3.6.1.4.1.11.2.14.11.5.1.61.2.1.3	HpicfGppcv2PolicyType	not-accessible	Type of the policy, used to distinguish policies with the same name.
HPI hpicfGppcv2AcPolicyName	1.3.6.1.4.1.11.2.14.11.5.1.61.2.1.4	HpicfGppcv2PolicyName	not-accessible	Name of the policy. Each policy is uniquely identified by its name. It is possible to apply the same policy in different manners to different interfaces and VLANs. This is a printable string up to 64 characters in size and case sensitive.
POR hpicfGppcv2AcIngressIfList	1.3.6.1.4.1.11.2.14.11.5.1.61.2.1.5	PortList	read-create	List of interfaces to which this policy applies at ingress.
OCT hpicfGppcv2AcIngressVIDList	1.3.6.1.4.1.11.2.14.11.5.1.61.2.1.6	OCTET STRING	read-create	A string of octets containing one bit per Vlan-Id for VLANS with vlan index values of 0 through 4096. The first octet corresponds to VLANs with vlan index values of 0 through 7, the second octet to VLANs 8 through 15, etc. The most significant bit of each octet corresponds to the lowest vlan index value in that octet. For each VLAN that this policy should apply to at ingress, the corresponding bit is set to '1'.
POR hpicfGppcv2AcEgressIfList	1.3.6.1.4.1.11.2.14.11.5.1.61.2.1.7	PortList	read-create	List of interfaces to which this policy applies at egress.
OCT hpicfGppcv2AcEgressVIDList	1.3.6.1.4.1.11.2.14.11.5.1.61.2.1.8	OCTET STRING	read-create	A string of octets containing one bit per Vlan-Id for VLANS with vlan index values of 0 through 4096. The first octet corresponds to VLANs with vlan index values of 0 through 7, the second octet to VLANs 8 through 15, etc. The most significant bit of each octet corresponds to the lowest vlan index value in that octet. For each VLAN that this policy should apply to at egress, the corresponding bit is set to '1'.
OCT hpicfGppcv2AcVIDList	1.3.6.1.4.1.11.2.14.11.5.1.61.2.1.9	OCTET STRING	read-create	A string of octets containing one bit per Vlan-Id for VLANS with vlan index values of 0 through 4096. The first octet corresponds to VLANs with vlan index values of 0 through 7, the second octet to VLANs 8 through 15, etc. The most significant bit of each octet corresponds to the lowest vlan index value in that octet. For each VLAN that this policy should apply to as a VLAN ACL, the corresponding bit is set to '1'.
INT hpicfGppcv2AcExpPolicy	1.3.6.1.4.1.11.2.14.11.5.1.61.2.1.10	INTEGER	read-create	Expiration policy. This indicates whether a policy should expire automatically. 'permanent' means a policy should never expire automatically.
OCT hpicfGppcv2AcExpString	1.3.6.1.4.1.11.2.14.11.5.1.61.2.1.11	OCTET STRING	read-create	Expiration string. This is used in conjunction with hpicfGppcv2AcExpPolicy to indicate when a policy should expire automatically. The value stored in this object is interpreted differently for different expiration policies. When the expiration policy is 'permanent', this value is ignored.
HPI hpicfGppcv2AcLastErrorCode	1.3.6.1.4.1.11.2.14.11.5.1.61.2.1.12	HpicfGppcv2LastErrorCode	read-only	Error code of the last error that occurred. A non-zero value indicates that the last operation performed by this instance of the application on the named policy did not succeed. A detailed description of the error is available in hpicfGppcv2AcLastErrorString.
STR hpicfGppcv2AcLastErrorString	1.3.6.1.4.1.11.2.14.11.5.1.61.2.1.13	SnmpAdminString	read-only	Description of the last error that occurred. This is a printable ASCII string that describes the error in some detail.
INT hpicfGppcv2AcRowAdminStatus	1.3.6.1.4.1.11.2.14.11.5.1.61.2.1.14	INTEGER	read-create	Administrative status of this row. The named policy in this row is applied to the interfaces and/or VLANs by this instance of the application only when the administrative status is enabled. This is the main on/off switch for the row. The row status must be active for this switch to have an effect.
ROW hpicfGppcv2AcRowStatus	1.3.6.1.4.1.11.2.14.11.5.1.61.2.1.15	RowStatus	read-create	Status of this row. Row status must be active, and the admin status (see hpicfGppcv2AcRowAdminStatus) must be enabled for this row to be activated.
OCT hpicfGppcv2AcIngressTunnelList	1.3.6.1.4.1.11.2.14.11.5.1.61.2.1.16	OCTET STRING	read-create	A string of octets containing one bit per tunnel-id for tunnels with tunnel values of 0 through 2047. The first octet corresponds to tunnel with values of 0 through 7, the second octet with values from 8 through 15, etc. The most significant bit of each octet corresponds to the lowest tunnel value in that octet. For each tunnel that this policy should apply to at ingress, the corresponding bit is set to '1'.
OCT hpicfGppcv2AcEgressTunnelList	1.3.6.1.4.1.11.2.14.11.5.1.61.2.1.17	OCTET STRING	read-create	A string of octets containing one bit per tunnel-id for tunnels with tunnel values of 0 through 2047. The first octet corresponds to tunnel with values of 0 through 7, the second octet with values from 8 through 15, etc. The most significant bit of each octet corresponds to the lowest tunnel value in that octet. For each tunnel that this policy should apply to at egress, the corresponding bit is set to '1'.
OCT hpicfGppcv2AcVACLEgressVIDList	1.3.6.1.4.1.11.2.14.11.5.1.61.2.1.18	OCTET STRING	read-create	A string of octets containing one bit per VLAN-ID for VLANs with VLAN index values of 0 through 4096. The first octet corresponds to VLANs with VLAN index values of 0 through 7, the second octet to VLANs 8 through 15, etc. The most significant bit of each octet corresponds to the lowest VLAN index value in that octet. For each VLAN that this policy should apply to as a VLAN ACL, the corresponding bit is set to '1'.
T/F hpicfGppcv2AcSharedFlag	1.3.6.1.4.1.11.2.14.11.5.1.61.2.1.19	TruthValue	read-create	The shared flag indicates whether to share the hardware resources for each application of this ACL on this type of interface where possible.
hpicfGppcv2NamedPolicyTable	1.3.6.1.4.1.11.2.14.11.5.1.61.3		not-accessible	The named policy table. This table lists the name and type of all policies that are applied via Gppcv2. The following limitation is in place: there can be no more than one policy action per SNMP pdu.
hpicfGppcv2NamedPolicyEntry	1.3.6.1.4.1.11.2.14.11.5.1.61.3.1		not-accessible	An entry in the named policy table.
HPI hpicfGppcv2NpPolicyName	1.3.6.1.4.1.11.2.14.11.5.1.61.3.1.1	HpicfGppcv2PolicyName	not-accessible	Name of the policy. The name of a policy is its unique identification. It is a printable string in ASCII characters. It can be up to 64 characters in length and is case sensitive.
HPI hpicfGppcv2NpPolicyType	1.3.6.1.4.1.11.2.14.11.5.1.61.3.1.2	HpicfGppcv2PolicyType	not-accessible	Type of the policy as defined in the TEXTUAL-CONVENTION.
INT hpicfGppcv2NpSubType	1.3.6.1.4.1.11.2.14.11.5.1.61.3.1.3	INTEGER	read-create	Subtype of the policy. A subtype of 'aclStandard' indicates that the policy is a standard Access Control List. The policy is used to permit or deny packets based on source IPv4 address and subnet only. A subtype of 'aclExtended' indicates that the policy is an extended Access Control List, an ACL that filters packets based on source IPv4 address and subnet, destination IPv4 address and subnet, and protocol amongst other packet information. A subtype of 'aclConnectionRateFilter' indicates that the policy is a connection-rate-filter Access Control List, similar to an ACL-extended. A subtype of 'aclIdm' indicates that the policy is a Identity Driven Management ACL used to filter traffic based on the source MAC address, protocol and destination IP information of a packet. A subtype of 'aclExtendedIpv6' indicates that the policy is an extended Access Control List, an ACL that filters packets based on source IPv6 address and subnet, destination IPv6 address and subnet, and protocol amongst other packet information. A subype of 'policyQos' indicates that the policy will perform Quality of Service actions on packets that match statements in the policy's classes. A subtype of 'policyMirror' indicates that the policy will perform mirror actions on packets that match statements in the policy's classes. A subtype of 'policyPbr' indicates that the policy will perform Policy Based Routing actions on packets that match statements in the policy's classes. A subtype of 'policyIpsec' indicates that the policy will perform IPsec actions on the packets that match statements in the policy's classes. A subtype of 'aclMacStandard' indicates that the policy is a standard MAC ACL. This ACL filters packets based on the source MAC address. A subtype of 'aclMacExtended' indicates that the policy is an extended MAC ACL. This ACL filters packets based on source MAC address, destination MAC address, ethertype, CoS and VLAN. A subtype of 'policyUser' indicates that the policy will perform per user actions on packets that match statements in the policy's classes.
I32 hpicfGppcv2NpReseqStart	1.3.6.1.4.1.11.2.14.11.5.1.61.3.1.4	Integer32	read-create	Specifies the starting sequence number for resequence.
I32 hpicfGppcv2NpReseqIncr	1.3.6.1.4.1.11.2.14.11.5.1.61.3.1.5	Integer32	read-create	Specifies the increment value for resequence.
I32 hpicfGppcv2NpLastSeqNo	1.3.6.1.4.1.11.2.14.11.5.1.61.3.1.6	Integer32	read-only	Contains the highest valid sequence number for this policy entry at any point of time.
HPI hpicfGppcv2NpLastErrorCode	1.3.6.1.4.1.11.2.14.11.5.1.61.3.1.7	HpicfGppcv2LastErrorCode	read-only	Error code of the last error that occurred. A non-zero value indicates that the last operation performed on the ruleEntry of this policy did not succeed. A detailed description of the error is available in hpicfGppcv2NpLastErrorString.
STR hpicfGppcv2NpLastErrorString	1.3.6.1.4.1.11.2.14.11.5.1.61.3.1.8	SnmpAdminString	read-only	Description of the last error that occurred. This is a printable ASCII string that describes the error in some detail.
ROW hpicfGppcv2NpRowStatus	1.3.6.1.4.1.11.2.14.11.5.1.61.3.1.9	RowStatus	read-create	Status of this row. The named policy must be active before rules can be added to it or removed from it. A newly created policy will remain in notReady state until it is given a valid policy type (see hpicfGppcv2NpPolicyType). A row in the named policy table can not be deleted if the named policy is referenced by a row in the application control table. The application control entries that refer to this row must be deleted before this row can be deleted.
hpicfGppcv2PolicyRulesTable	1.3.6.1.4.1.11.2.14.11.5.1.61.4		not-accessible	The policy rules table. A policy can consist of multiple rules. All of the rules of a policy are listed in this table. Each rule consists of a string and a numeric identifier - the rule id. The following limitation is in place: there can be no more than one policy action per SNMP pdu.
hpicfGppcv2PolicyRulesEntry	1.3.6.1.4.1.11.2.14.11.5.1.61.4.1		not-accessible	An entry in the policy rules table.
I32 hpicfGppcv2PrRuleId	1.3.6.1.4.1.11.2.14.11.5.1.61.4.1.1	Integer32	not-accessible	Numeric identifier of the rule. The rules in a policy are processed sequentially in increasing order of their rule ids. These numeric ids are generated by the application that creates the policy. Rules within a policy have unique rule IDs.
OCT hpicfGppcv2PrPolicyRule	1.3.6.1.4.1.11.2.14.11.5.1.61.4.1.2	OCTET STRING	read-create	Rule string. This is a string that represents one rule in the policy. A policy can consist of one or many rules. For details on the format of the rule string please see: http://h17007.www1.hp.com
OCT hpicfGppcv2PrRemark	1.3.6.1.4.1.11.2.14.11.5.1.61.4.1.3	OCTET STRING	read-create	Remark string. This is a descriptive text string for a policy rule entry. For details on the format of the rule string please see: http://h17007.www1.hp.com
ROW hpicfGppcv2PrRowStatus	1.3.6.1.4.1.11.2.14.11.5.1.61.4.1.4	RowStatus	read-create	Status of this row. A rule must have an active row status in order to take effect. Only active rules within the named policy are applied when an application applies the policy. It is possible to use this row status as an on/off switch for enabling or disabling selected rules within a policy. A newly created rule will remain in notReady state until it is given a valid rule string (see hpicfGppcv2PrPolicyRule).

RFC description

HP proprietary General Purpose Packet Control Version 2 MIB for traffic classification and policy.

Start monitoring HP ProCurve/Aruba switch (General Purpose Packet Control v2, ingress ACL/tunnel policy) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HP-ICF-GPPCV2-MIB

What Is HP-ICF-GPPCV2-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description